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DETAILED ACTION 

1 . This action is in response to tine communication filed on 07/1 4/201 1 . In response 
to the office action mailed on 02/14/201 1 , claims 1 and 4 have been amended. Pending 
claims include claims 1 and 3-14. 

The objection to claims 1 and 4 has been withdrawn due to Applicants' 
amendments. 

Examiner Notes 

2. Examiner cites particular pages or columns or paragraphs and/or line numbers in 
the references as applied to the claims below for the convenience of Applicant(s). 
Although the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages and figures 
may apply as well. It is respectfully requested that, in preparing responses, Applicant(s) 
fully consider(s) the references in entirety as potentially teaching all or part of the 
claimed invention, as well as the context of the passage as taught by the prior art or 
disclosed by Examiner. 

Response to Arguments 

3. Applicants' arguments filed on 07/14/2011 have been fully considered but they 
are not persuasive. 

Applicants argue that: 
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i. the interpretation of at least two resetting steps and the communicating step is 
inconsistent with Jordan's teaching. Specifically, the Office Action interprets Jordan as 
teaching: resetting the current key to equal the new key (K3 being set to the current 
key), resetting the old key to equal an encryption key used by a station in 
communication with a point in the network (K2 being set to the old key), and the new 
key (K3) being communicated by encryption with the old key (I.e., K2). 
However, such key assignments are inconsistent with Jordan's teaching that the "old 
password key" (K2) used to encrypt the message containing the new key (K3) is also 
the same as the "current password key" (e.g., para. 0080); whereas, according to the 
Office Action, the current key has been reset as K3 (i.e., not the old key K2). Thus, the 
specific correspondence of the various keys in the Office Action for these resetting and 
communicating steps does not agree with Jordan's teaching (page 2 of Remarks). 

II. Although Jordan's Fig. 1 Is said to be an exemplary wireless system, It Is also 
clear that Jordan does not contemplate or suggest the specific configurations In 
Applicants' claimed invention - that of providing an access point in the network and 
performing the recited steps at the access point. The cited portions of Chen disclose 
updating ciphering key between an access point and a station. Including generating a 
new key and sending the new key by encrypting It using the old key (see Fig. 2, para. 
1 2 and 43). However, there is no showing that Chen teaches that any of the other steps 
in Jordan be performed at the access point. The Office Action's assertion, that one 
skilled in the art would modify Jordan's method to perform each step in the exact 



Application/Control Number: 10/559,889 Page 4 

Art Unit: 2436 

manner of Applicants' invention, appears to be a conclusory statement based on 
hindsight from Applicants' disclosure (pages 2-3 of Remarks). 

In response to Applicants' arguments: 

1. Examiner respectfully disagrees for the following reasons. The reason why 
Jordan states that "the old password key, which is also called the current password 
key" (note that Jordan did not state that the old key has the same value as the current 
key at the messaging gateway) in par. 0080 is that from the messaging gateway's 
point of view, the old key is reset to K2 and the current key Is reset to new key K3 
since the messaging gateway initiated the key update but from the wireless device's 
point of view, the old key is still K1 and the current key is still K2 since the wireless 
device did not initiate the key update and did not know if a key update has occurred until 
It successfully received new key K3. As a result, although the old key at the messaging 
gateway Is also called the current key, the old key at the messaging gateway Is K2 and 
not K3 . Furthermore, it should be noted that in order for the wireless device to 
successfully receive the current key K3 from the messaging gateway, the current key 
K3 must not be encrypted using the current key K3 (since the wireless device does not 
have K3) but Instead must be encrypted using the old key K2 at the messaging gateway 
(which Is the current key at the wireless device). Thus, the interpretation of at least two 
resetting steps and the communicating step is consistent with Jordan's teaching. 

ii. Examiner respectfully disagrees for the following reasons. In response to 
Applicants' argument that the examiner's conclusion of obviousness is based upon 
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improper liindsiglit reasoning, it must be recognized that any judgment on obviousness 
is in a sense necessarily a reconstruction based upon hindsight reasoning. But so long 
as it takes into account only knowledge which was within the level of ordinary skill at the 
time the claimed invention was made, and does not include knowledge gleaned only 
from the applicant's disclosure, such a reconstruction is proper. See In re McLaughlin, 
443 F.2d 1392, 170 USPQ 209 (CCPA 1971). 

In this case, although Jordan does not disclose performing the recited steps at an 
access point in the network, Jordan does disclose performing the recited steps at a 
messaging gateway in the network in communication with at least one station. 
Furthermore, based on pars. 0033-0034, one of ordinary skill in the art would readily 
recognize that Jordan's synchronization methods can be implemented in other wireless 
communication systems where there is a need to maintain secure wireless 
transmissions including a wireless communication system comprising access points 
and stations. 

Moreover, Chen discloses a method for updating and synchronizing ciphering 
key between at least one access point in direct communication with at least one station 
in a wireless network to prevent network hackers from invading into the wireless 
network where a newly generated encryption key is transmitted directly from the at least 
one access point to the at least one station in encrypted form using an old encryption 
key (e.g. Fig. 2 and pars. 0005, 0012, 0043). 

Thus, it would have been obvious to a person of ordinary skill in the art at the 
time of the invention to modify the invention of Jordan by implementing the above 
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synchronization method in a wireless communication system comprising at least one 
access point in direct communication with at least one station and communicating the 
newly generated encryption key directly from the at least one access point to the at 
least one station as described by Chen for the purpose of preventing hackers from 
invading into the wireless network (Chen, pars. 0005, 0012). 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1, 7-8, and 13 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Jordan et al. US 2004/0081320 A1 (hereinafter "Jordan") in view of 
Chen et al. US 2003/0221098 Al (hereinafter "Chen"). 

Regarding ciaim 1 . Jordan discloses a key synchronization metliod for a 
wireless network [e.g. Figs. 1,8-11] comprising: 

setting a current encryption key and an old encryption key at a point in the 
wireless network; [e.g. pars. 0080-0081, 0083, 0084, 0089-0091, 0093: Jordan's key 
synchronization method starts out with an initial or base password key (let's call it K1) 
being a current password key (i.e. current password key is set to K1) at a messaging 
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gateway and a wireless device. Later, when a new password l<ey is generated (let's call 
it K2) at the messaging gateway, K1 becomes a prior or old password key (i.e. old 
password key is set to K1 ) and K2 replaces K1 to become the current password key 
(i.e. the current password key is set to K2). Both the messaging gateway and the 
wireless device use this same key K2 to securely communicate with one another] 

generating a new encryption key at tlie point; [e.g. pars. 0078-0079, 0083: At 
some later point in time, another new password key is generated (let's called it K3) at 
the messaging gateway] 

resetting at tiie point the current encryption l<ey to equal tiie newly 
generated encryption Icey; [e.g. pars. 0081, 0083: K3 replaces K2 to become the 
current password key (i.e. the current password key is set to K3) at the messaging 
gateway] 

resetting at tiie point the old encryption key to equal an encryption key 
being used by a station in communication with the point; [e.g. pars. 0080 and 
0083: K2, a password key currently being used by a wireless device in communication 
with the messaging gateway, becomes the old password key (i.e. the old password key 
is set to K2)] 

communicating the newly generated encryption key from the point directly 
to the station in an encrypted form using the old encryption key; [e.g. pars. 0078, 
0080, 0082-0083: K3 is transmitted from the messaging gateway to the wireless device 
in an encrypted form using the old password key] 
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indicating at the point a decryption failure for a data frame received from 
the station when the encryption key used by the station does not match the 
current encryption key, [e.g. pars. 0087-0088, 0090: messaging gateway initiating a 
function that communicates to the wireless communication system that the updated 

password key is not correct or sending an error message to the wireless device or pars. 
0091-0093: indicating a decryption failure by reverting back to a password key that is 
prior to the most recent updated password key] wherein a data frame that failed to 
decrypt using the current encryption key is decrypted by the point using the old 
encryption key; [e.g. pars. 0091-0093: messaging gateway reverting back to a 
password key that is prior to the most recent updated password key (i.e. the old 
password key)] 

resetting at the point the old encryption key to equal the current encryption 
key when decryption using the new encryption key is successful [e.g. pars. 0088, 
0091, 0078, 0083: when the messaging gateway and the wireless device are re- 
synchronized (i.e. both contain most recent updated password key or K3), another new 
password key (let's called it K4) can be generated which results in K3 becoming the old 
password key (i.e. the old password key is set to K3)] 

Although Jordan discloses that the above steps: setting, generating, resetting, 
resetting, communicating, indicating, decrypting, and resetting are performed at a point 
in the network (i.e. messaging gateway), Jordan does not specifically disclose that the 
above steps: setting, generating, resetting, resetting, communicating, indicating, 
decrypting, and resetting are performed at an access point and that the newly 



Application/Control Number: 10/559,889 Page 9 

Art Unit: 2436 

generated encryption key is communicated directly from the access point to the 
station. 

However, Jordan discloses that the above wireless communication system 
shown in Fig. 1 is an exemplary embodiment of a wireless communication system in 
which Jordan's synchronization methods may be implemented (pars. 0033-0034). 
Thus, one of ordinary skill in the art would readily recognize that Jordan's 
synchronization methods can be implemented in other wireless communication systems 
where there is a need to maintain secure wireless transmissions including a wireless 
communication system comprising access points and stations. 

Furthermore, Chen discloses a method for updating and synchronizing ciphering 
key between at least one access point in direct communication with at least one station 
in a wireless network to prevent network hackers from invading into the wireless 
network where a newly generated encryption key Is transmitted directly from the at least 
one access point to the at least one station in encrypted form using an old encryption 
key (e.g. Fig. 2 and pars. 0005, 0012, 0043). 

Thus, it would have been obvious to a person of ordinary skill in the art at the 
time of the Invention to modify the invention of Jordan by implementing the above 
synchronization method In a wireless communication system comprising at least one 
access point In direct communication with at least one station and communicating the 
newly generated encryption key directly from the at least one access point to the at 
least one station as described by Chen for the purpose of preventing hackers from 
invading into the wireless network (Chen, pars. 0005, 0012). 
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Regarding claim 7 . Jordan-Chen combination furtlier discloses the method 
according to claim 1 , wherein said setting is performed by the access point for 
each station in the wireless network [see rejection of claim 1 and Chen's Fig. 2 and 
par. 0017] 

Regarding claim 8 . this claim is rejected for similar reasons as in claim 1 . 

Regarding claim 13 , Jordan-Chen combination further discloses the method 
according to claim 1 , wherein the new encryption key is generated at the access 
point upon expiration of a key refresh interval [e.g. Chen, par. 0054: As long as the 
random-code generation program 38 is detonated to generate a new ciphering key each 

time the counting module 36 conforms to a predetermined time, It Is covered by the 
disclosure of the present invention. In addition, the predetermined time can be a fixed 
time or a non-fixed time. That means the wireless network system 30 can update the 
common ciphering key according to a fixed time or a random time. No matter if the 
common ciphering key Is updated according to a fixed time or a random time, the 
ciphering key also can be automatically updated] 

6. Claims 3, 4, 9 and 14 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Jordan in view of Chen and further in view of Loc et al. US 7,293,289 
(hereinafter "Loc"). 
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Regarding claim 3 . Jordan-Chen combination furtlier discloses the method 
according to claim 1, further comprising: decrypting received data frames at the 
access point using the old encryption key as [see rejection to claim 1 above] but 
does not specifically disclose the received data frames are associated with said out- 
of-sync counter and incrementing an out-of-sync counter in the access point 
when said decryption failure occurs due to the encryption key used by the station 
not matching the current encryption key. 

However, Loc discloses a method for detecting a security breach in a network 
wherein "Each time a client 108 fails to successfully decrypt a packet, the encryption 
failure counter is incremented" (Fig. 5, Col. 6, lines 59-61). Furthermore, Jordan 
discloses that when there is a transmit or receive error, the messaging gateway reverts 
back to a password key that is prior to the most recent updated password key (i.e. the 
old encryption key) to decrypt a message received from the wireless device after 
unsuccessfully decrypting the message using the updated password key (i.e. the 
current password key) (Figs. 10-11). 

Loc, Chen, and Jordan are analogous art because they are in the same field of 
secure data communication in a wireless network. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by incrementing an out-of-sync 
counter in the access point when said decryption failure occurs due to the encryption 
key used by the station not matching the current encryption key and decrypting received 
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data frames associated witli said out-of-sync counter as described by Loc in order to 
detect a security breach in a networl< (Loc, Col. 1, lines 22-23) and resynclironizing 
password keys (Jordan, Par. 0087). 

Regarding claim 4 , Jordan-Chen combination further discloses the method 
according to claim 1, further comprising: 

decrypting, using the new encryption key, the received data frame from the 
station when the access point determines the station sending the received data 
frame Is using the new encryption key, the access point starting to use the new 
encryption key when a first data frame correctly encrypted with the new 
encryption key is received from the station; [e.g. Jordan, Figs. 10-11, Pars. 0088- 
0089 and 0091-0092 and Chen, par. 0051] but does not specifically disclose re-setting 
an out-of-sync counter to zero upon successful decryption. 

However, Loc discloses a method for detecting a security breach in a network 
wherein "Each time client 108 successfully decrypts a packet, the encryption failure 
counter is reset to zero" (Loc, Col. 6, lines 57-69). 

Loc, Chen, and Jordan are analogous art because they are in the same field of 
secure data communication in a wireless network. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by re-setting an out-of-sync 
counter to zero upon successful decryption as described by Loc in order to detect a 
security breach in a network (Loc, Col. 1 , lines 22-23). 
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Regarding claim 9 . this claim is rejected for similar reasons as in claim 3. 

Regarding claim 14 . Jordan-Chen-Loc combination further discloses the 
method according to claim 3, wherein said out-of-sync counter comprises a 
predetermined threshold that If exceeded causes communication to terminate 
between the access point and a source of the data frames causing the threshold 
of said out-of-sync counter to be exceeded [Loc, Col. 6, lines 61-65: When the 
encryption failure counter reaches a predetermined threshold n (that is, when n 
consecutive failures have occurred) (step 512), client 108 sends an alert packet to 
access point. Loc, Col. 6, lines 5-9: furthermore, upon receiving the alert of a security 
breach, the access point "responds by immediately removing the MAC address of client 
108 from its list of authorized clients, by ceasing to send any packets to the MAC 
address of client 108, and by discarding all packets that are received from the MAC 
address of client 1 08] 

7. Claims 5-6 and 10-12 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Jordan in view of Chen and further in view of Kelem et al. US 
6,1 18,869 (hereinafter "Kelem"). 

Regarding claim 5 . Jordan-Chen combination discloses the method according 
to claim 1 but does not specifically disclose further comprising setting the old 
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encryption key equal to a null value, said null value representing a no encryption 
mode. 

However, Kelem discloses if decryption is not desired, a decryption key value of 
0 is chosen (Col. 4, lines 18-20). By disclosing setting a decryption key to a null value 
or 0 when no decryption Is desired, Kelem also makes it obvious to set an encryption 
key to a null value when no encryption is desired. 

Kelem, Chen, and Jordan are analogous art because they are in the same field 
of endeavor of encryption and/or decryption key protection. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by setting the old key equal to a 
null value, said null value representing a no encryption mode as described by Kelem in 
order to modify the key thereby providing a high level of security (Kelem, Col. 2, lines 
10-14). 

Regarding claim 6 . Jordan-Chen combination discloses the method according 
to claim 1 but does not specifically disclose further comprising setting the current 
encryption key and the old encryption key to a null value, said null value 
representing a no encryption mode. 

However, Kelem discloses if decryption is not desired, a decryption key value of 
0 is chosen (Col. 4, lines 18-20). By disclosing setting a decryption key to a null value 
or 0 when no decryption is desired, Kelem also makes it obvious to set an encryption 
key to a null value when no encryption is desired. 
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Kelem, Chen, and Jordan are analogous art because they are in the same field 
of endeavor of encryption and/or decryption key protection. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by setting the current encryption 
key and the old encryption key to a null value, said null value representing a no 
encryption mode as taught by Kelem in order to modify the keys to provide a high level 
of security (Kelem, Col. 2, lines 10-14). 

Regarding claim 10 , Jordan-Chen combination discloses tfie Icey 
synclironization system according to claim 8 but does not specifically disclose 
wherein said at least one access point Is configured for setting the old encryption 
key to a null value, said null value representing a no encryption mode. 

However, Kelem discloses if decryption is not desired, a decryption key value of 
0 is chosen (Col. 4, lines 18-20). By disclosing setting a decryption key to a null value 
or 0 when no decryption is desired, Kelem also makes it obvious to set an encryption 
key to a null value when no encryption is desired. 

Kelem, Chen, and Jordan are analogous art because they are in the same field 
of endeavor of encryption and/or decryption key protection. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by setting the old encryption key at 
the access point to a null value which represents a no encryption mode as taught by 
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Kelem in order to modify the key thereby providing a high level of security (Kelem, Col. 
2, lines 10-14). 

Regarding claim 11 . Jordan-Chen combination discloses the key 
synchronization system according to claim 8 but does not specifically disclose 
wherein said at least one access point is configured for setting the new 
encryption key to a null value, said null value representing a no encryption mode. 

However, Kelem discloses if decryption is not desired, a decryption key value of 
0 is chosen (Col. 4, lines 18-20). By disclosing setting a decryption key to a null value 
or 0 when no decryption is desired, Kelem also makes it obvious to set an encryption 
key to a null value when no encryption is desired. 

Kelem, Chen, and Jordan are analogous art because they are in the same field 
of endeavor of encryption and/or decryption key protection. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the invention of Jordan-Chen by setting the new encryption key 
at the access point to a null value which represents a no encryption mode as taught by 
Kelem in order to modify the key thereby providing a high level of security (Kelem, Col. 
2, lines 10-14). 



Regarding claim 12 . Jordan-Chen combination discloses the key 
synchronization system according to claim 8 but does not specifically disclose 
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wherein said at least one access point initially sets the old encryption key to a 
null value. 

However, Kelem discloses if decryption is not desired, a decryption key value of 
0 is chosen (Col. 4, lines 18-20). By disclosing setting a decryption key to a null value 
or 0 when no decryption Is desired, Kelem also makes it obvious to set an encryption 
key to a null value when no encryption is desired. 

Kelem, Chen and Jordan are analogous art because they are in the same field of 
endeavor of encryption and/or decryption key protection. 

It would have been obvious to a person of ordinary skill In the art at the time of 
the Invention to modify the invention of Jordan-Chen by setting the old encryption key at 
the access point initially to a null value which represents a no encryption mode as 
taught by Kelem in order to modify the key thereby providing a high level of security 
(Kelem, Col. 2, lines 10-14). 



Conclusion 

THIS ACTION IS MADE FINAL. See MPEP 706.07(a). Applicant is reminded of 

the extension of time policy as set forth In 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action Is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply Is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action Is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action Is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to TRONG NGUYEN whose telephone number is 
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(571)270-7312. The examiner can normally be reached on Monday through Thursday 
9:30 AM - 5:00 PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, NASSER MOAZZAMI can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status Information for unpublished applications is available through Private PAIR only. 
For more Information about the PAIR system, see http://palr-dlrect.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/David Garcia Cervetti/ 
Primary Examiner, Art Unit 2436 



/TN/ 

Examiner, Art Unit 2436 



